Iowa City Warns Callers Are Spoofing Real City Employee Phone Numbers

According to KCRG-TV, Iowa City officials are warning residents about phone number spoofing, a trick that lets a caller disguise their number so it appears to come from a trusted source. In this case, the trusted source is the city itself.

City staff said residents have reported getting calls that showed up as coming from a city employee's actual direct phone line. No employee made those calls. The number on the screen was real. The person on the other end was not who the screen said.

How the spoofing works against a resident

The scam depends entirely on one habit: trusting caller ID. A resident sees a familiar local number, maybe one they recognize from a past interaction with a city office, and assumes the call is genuine. That assumption is the whole mechanism. Spoofing technology does not hack a phone or intercept a real call. It just paints a false number on the screen before the call connects.

Once the resident picks up, trusting the number, the caller can ask for personal information or push for a payment. The city confirms that employees do sometimes call residents for legitimate business, which is exactly what makes this approach effective. A resident cannot tell, from the call itself, whether it is routine city business or a spoofed number exploiting that same expectation.

The tell

The tell is not in how the call sounds. It is in what the call asks for. Iowa City officials say residents should be cautious about any unexpected call requesting personal information or payment, regardless of what number it appears to come from. A legitimate city call for routine business does not typically need a resident to hand over sensitive details or send money on the spot.

Caller ID cannot be trusted to verify who is calling, because the number itself can be faked without any access to the real line. The only reliable check happens after the call, not during it.

Iowa City has set up that check. Residents who are unsure whether a call is legitimate can contact the city's Information Desk at 319-356-5000, where staff can confirm whether the call came from a real employee. Anyone who believes they have already been a victim of fraud can report it to the Joint Emergency Communications Center at 319-356-6800.

The mechanism only works in the gap between the call and that verification. Closing that gap, by calling the Information Desk before responding to any request, removes the advantage the spoofed number gave the caller.